Solved

Server 2000 EVENT VIEWER FILLING ON EACH BOOT + 3 or 4 ERRORS in EVENT LOG!!! POSTING WHAT I SEE!!!

Posted on 2006-10-20
7
298 Views
Last Modified: 2008-01-09
OK so I am running windows server 2000 and have 3 client computers at my house running XP... I am just trying to learn server technology, so i may have not installed server 2000 correctly, it was awhile since i installed server 2000, i'm not sure if i set everything up correctly... every day after a few hours the event log on the server 2000 the event log fills up and warns me that it is full... I noticed the one major error message is the one filling it up, i will post that one first, but ALSO, i use a logon script, so when the user in active directory logs in i have their logon script run, for some reason the network shares disconnect after a few minutes or sometimes a few hours.... Once i open up explore, and just click once on the disconnevted network drive it then says connected, i'm not double clicking or anything like that, just one click and it connects.... Anyways, i guess thats not my main problem.... I think i may have a DNS problem as well.... take a look at these error messages i am seeing in event logs on server 2000.

THESE FIRST TWO EVENTS ARE THE ONES I SEE THE MOST, and have the RED NEXT TO THEM, WHICH IS NOT GOOD...

Event Type:      Warning
Event Source:      MSFTPSVC
Event Category:      None
Event ID:      100
Date:            10/19/2006
Time:            1:44:18 PM
User:            N/A
Computer:      SERVER2000
Description:
The server was unable to logon the Windows NT account 'Administrator' due to the following error: Logon failure: unknown user name or bad password.  The data is the error code.
For additional information specific to this message please visit the Microsoft Online Support site located at: http://www.microsoft.com/contentredirect.asp.
Data:
0000: 2e 05 00 00               ....    



Event Type:      Error
Event Source:      NETLOGON
Event Category:      None
Event ID:      5774
Date:            10/20/2006
Time:            3:52:59 AM
User:            N/A
Computer:      SERVER2000
Description:
Registration of the DNS record '_ldap._tcp.pdc._msdcs.theshacknj.com. 600 IN SRV 0 100 389 server2000.theshacknj.com.' failed with the following error:
DNS server unable to interpret format.  
Data:
0000: 29 23 00 00               )#..    


THESHACKNJ  is the NAME OF MY DOMAIN, THING IS I HOST MY FRIENDS WEBSITE TOO, CALLED THESHACKNJ.COM  not sure if thats bad or not....  ANYWAYS, BELOW ARE THE OTHER ERROR MESSGES IN EVBENT LOG, BUT THE TWO ABOVE ARE MOST IMPORTNT TO FIX....

Event Type:      Error
Event Source:      NETLOGON
Event Category:      None
Event ID:      5774
Date:            10/19/2006
Time:            1:25:27 PM
User:            N/A
Computer:      SERVER2000
Description:
Registration of the DNS record '_kpasswd._tcp.theshacknj.com. 600 IN SRV 0 100 464 server2000.theshacknj.com.' failed with the following error:
DNS server unable to interpret format.  
Data:
0000: 29 23 00 00               )#..  


------------------------------------------------------------------------------------------------------


Event Type:      Warning
Event Source:      NETLOGON
Event Category:      None
Event ID:      5781
Date:            10/19/2006
Time:            1:24:02 PM
User:            N/A
Computer:      SERVER2000
Description:
Dynamic registration or deregistration of one or more DNS records failed because no DNS servers are available.
Data:
0000: 2a 23 00 00               *#..    


----------------------------------------------------------------------------------------------------------------- THIS IS A TIME ERROR????

Event Type:      Error
Event Source:      w32time
Event Category:      None
Event ID:      62
Date:            10/19/2006
Time:            5:19:23 PM
User:            N/A
Computer:      SERVER2000
Description:
This Machine is a PDC of the domain at the root of the forest. Configure to sync from External time source using the net command,  'net time /setsntp:<server name>'.
Data:
0000: e5 03 00 00               å...    


------------------------------------------------------------------------------------------------------------------------NEXT ONE IS JUST EVENT LOG IS FULL

Event Type:      Error
Event Source:      EventLog
Event Category:      None
Event ID:      6000
Date:            10/19/2006
Time:            1:58:14 PM
User:            N/A
Computer:      SERVER2000
Description:
The System log file is full.




THANKS A LOT, I HOPE THOSE EVENT LOGS HELP SOMEBODY UNDERSTAND WHATS GOING ON WITH MY COMPUTER, PLEASE LET ME KNOW WHAT I CAN DO ASAP!!!! THANKS AGAIN!!!!! And if you know how to keep my network MAPPED drives connected that will be cool too, but maybe the first problem will help my other ones, possibly a dominoe effect going on???  THANKS IN ADVANCE!!!!!


0
Comment
Question by:PaigePeople
  • 4
  • 3
7 Comments
 
LVL 48

Accepted Solution

by:
Jay_Jay70 earned 500 total points
ID: 17782917
reinstall DNS. Make sure there are no services running under the admin account as it sounds like a PW may have been changed and a service could still be starting it.

make sure on client and server tcpip config that you are only looking internall at DNS, no ISP entries except as forwarders
0
 

Author Comment

by:PaigePeople
ID: 17786437
OK I will reinstall DNS, not sure how to really set that up.... I know my router may be acting as the dhcp server assigning IP's.....
0
 
LVL 48

Assisted Solution

by:Jay_Jay70
Jay_Jay70 earned 500 total points
ID: 17786442
should have your server doing DHCP...thats probably where half your issues are coming from!
0
Efficient way to get backups off site to Azure

This user guide provides instructions on how to deploy and configure both a StoneFly Scale Out NAS Enterprise Cloud Drive virtual machine and Veeam Cloud Connect in the Microsoft Azure Cloud.

 

Author Comment

by:PaigePeople
ID: 17821768
OK, so i set up DNS on the server, not getting the error message in the event log, however, my network shares are still be lost after a few hours and i'm gonna assume its becasue i should have my server acting as the dhcp server as well?? Now, i never set dhcp up before, is it pretty easy, says i have to set up a scope first, which i assume is the ip numbers to be assigned.... so the router is 192.168.1.1   so i would want the scope to be 192.168.1.2 - 192.168.1.254  or like .100 i only have 5 computers in the house between my roomates and I so no need to have so many ip addys reserved.... What other info should i know before setting up that....

Ok and these are the TWO new ERROR messages in the EVENT LOG on the server.... Keep in mind i still have the router acting as DHCP server... not sure about the second error.... but still not sure how tio set up the dhcp, with scope and all that....


OK THIS IS THE DHCP ERROR   THIS ERROR APPEARED EVERY HOUR AT THE SAME MINUTE after i cleared the log... so say 12:08am 1:08am 2:08am etc etc
 
Event Type:      Error
Event Source:      DhcpServer
Event Category:      None
Event ID:      1051
Date:            10/27/2006
Time:            2:08:51 PM
User:            N/A
Computer:      SERVER2000
Description:
The DHCP/BINL service has determined that it is not authorized to service clients on this network for the Windows domain: theshacknj.com.
Data:
0000: 00 00 00 00               ....    


SOMETHING TO DO WITH THE TIME NOT UPDATING OR BEING CORRECT????  I even tried this net time /setsntp:<server name>'. putting in my server name... said command completed succesfully  but then over the next 6 hours it gave the erro a couple times...

Event Type:      Error
Event Source:      w32time
Event Category:      None
Event ID:      62
Date:            10/27/2006
Time:            12:53:00 PM
User:            N/A
Computer:      SERVER2000
Description:
This Machine is a PDC of the domain at the root of the forest. Configure to sync from External time source using the net command,  'net time /setsntp:<server name>'.
Data:
0000: e5 03 00 00               å...    








NOW THESE NEXT TWO WERE FINE, But curious to know what they actually mean???  received 0 Articles????


Event Type:      Information
Event Source:      NNTPSVC
Event Category:      None
Event ID:      420
Date:            10/27/2006
Time:            2:08:02 PM
User:            N/A
Computer:      SERVER2000
Description:
Pickup Directory Status Report.  In the last 60 minutes, the pickup directory for  virtual server 1 has successfully received 0 articles.    



Event Type:      Information
Event Source:      NNTPSVC
Event Category:      None
Event ID:      421
Date:            10/27/2006
Time:            2:08:02 PM
User:            N/A
Computer:      SERVER2000
Description:
Post Status Report.  In the last 60 minutes, the virtual server 1  has successfully received 0 posts.  



THANKS AGAIN FOR ALL THE HELP!!!! Sorry i am slow to respond but i have been away, my brother got married recently in arizona....
0
 

Author Comment

by:PaigePeople
ID: 17826911
so this is now filling up my event log, the dhcp is set up and dns is setup... This is really the only ERROR message in the event log now, but its their a thousand times, well a lot...



Event Type:      Warning
Event Source:      MSFTPSVC
Event Category:      None
Event ID:      100
Date:            10/28/2006
Time:            2:38:54 PM
User:            N/A
Computer:      SERVER2000
Description:
The server was unable to logon the Windows NT account 'Administrator' due to the following error: Logon failure: unknown user name or bad password.  The data is the error code.
For additional information specific to this message please visit the Microsoft Online Support site located at: http://www.microsoft.com/contentredirect.asp.
Data:
0000: 2e 05 00 00               ....    
0
 
LVL 48

Expert Comment

by:Jay_Jay70
ID: 17838556
you have to disable the router from doing DHCP or things will go haywire

good guide for DHCP

http://computerperformance.co.uk/w2k3/services/DHCP_Configure.htm
0
 

Author Comment

by:PaigePeople
ID: 17838836
yeah i disabled the router from doing DHCP the same time i authorized the DHCP server on the windows 2000 box... So that shouldnt be the problem... Any other ideas????
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Greetings, Experts! First let me state that this website is top notch. I thoroughly enjoy the community that is shared here; those seeking help and those willing to sacrifice their time to help. It is fantastic. I am writing this article at th…
This article is in response to a question (http://www.experts-exchange.com/Networking/Network_Management/Network_Analysis/Q_28230497.html) here at Experts Exchange. The Original Poster (OP) requires a utility that will accept a list of IP addresses …
This Micro Tutorial will give you a basic overview how to record your screen with Microsoft Expression Encoder. This program is still free and open for the public to download. This will be demonstrated using Microsoft Expression Encoder 4.
Internet Business Fax to Email Made Easy - With eFax Corporate (http://www.enterprise.efax.com), you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, fr…

867 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

18 Experts available now in Live!

Get 1:1 Help Now